Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Q6n8kH8TAp5sidpv1cdEbhe0HC4.roa
File: Q6n8kH8TAp5sidpv1cdEbhe0HC4.roa (raw, json)
Hash identifier: 7ZVXtmnU48foDJIrqhabcFUqdXz7E7QMZLYzqtn8jsc=
Subject key identifier: 43:A9:FC:90:7F:13:02:9E:6C:89:DA:6F:D5:C7:44:6E:17:B4:1C:2E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01911689A40B4417031F6983EA17E988CF9E
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Q6n8kH8TAp5sidpv1cdEbhe0HC4.roa
Signing time: Sat 03 Aug 2024 04:40:04 +0000
ROA not before: Sat 03 Aug 2024 04:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 45.11.184.0/22 maxlen: 22
2a05:9080::/48 maxlen: 48
2a05:9080:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Aug 2024 20:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:16:89:a4:0b:44:17:03:1f:69:83:ea:17:e9:88:cf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 3 04:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43a9fc907f13029e6c89da6fd5c7446e17b41c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:fa:b5:8e:ce:4d:78:7a:8e:79:7e:dc:80:
3b:30:62:94:36:05:23:9f:90:83:53:0b:cd:1b:d6:
d0:e8:74:83:13:e9:ec:33:fa:5c:aa:60:6c:cc:04:
82:fc:4d:d3:ef:dc:26:8d:1a:b5:2e:51:f2:14:60:
39:0e:77:c4:77:c2:6b:e5:8e:e2:ec:db:47:48:14:
9b:52:39:36:82:21:5e:87:95:37:83:c8:37:0e:1e:
8d:cf:97:a4:08:f8:39:dc:35:97:db:1f:e1:0b:ae:
da:19:20:3d:b8:6c:24:cb:a9:95:d1:7c:35:e7:b8:
aa:8f:61:ce:1b:a0:70:62:d0:b5:77:f1:8e:61:f0:
08:08:45:7e:00:56:b5:f4:48:00:ac:6b:23:2f:b4:
52:5c:5b:f7:33:52:d7:85:b4:de:c6:fa:2d:ec:59:
c3:2c:b0:9b:f2:b4:df:3a:93:bb:47:96:a2:9a:a3:
a2:e3:81:e9:0b:47:9c:00:46:4c:10:c9:50:01:6d:
36:45:70:89:95:68:c7:54:ca:06:e1:86:09:7a:83:
25:20:5f:4a:8c:76:33:74:0e:d1:f9:9c:03:dd:c5:
5f:42:cd:30:e7:e3:ba:56:63:21:c9:a2:cc:89:b9:
6f:67:71:8a:82:b0:90:71:82:7c:34:37:12:a6:0f:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:FC:90:7F:13:02:9E:6C:89:DA:6F:D5:C7:44:6E:17:B4:1C:2E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Q6n8kH8TAp5sidpv1cdEbhe0HC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/22
IPv6:
2a05:9080::/48
2a05:9080:4::/48
Signature Algorithm: sha256WithRSAEncryption
50:e0:2c:52:f7:63:f3:31:6e:98:2b:61:37:10:7b:1b:4d:92:
27:25:df:38:0c:5a:d1:84:c2:a7:69:28:03:67:f6:58:1e:a7:
14:b8:5f:10:55:e8:ef:34:40:6d:56:80:1a:70:ee:ff:12:62:
c6:73:95:b1:ed:f8:0e:e4:8d:d4:f7:0f:2f:5e:2d:64:95:ba:
e1:a9:c8:7e:73:da:da:3d:c2:90:74:03:2b:d9:40:2d:29:46:
f5:62:4a:d6:26:38:cd:21:5e:70:b3:da:11:c7:48:c0:06:cc:
56:ea:89:9c:96:f8:ba:f4:9e:64:d0:d7:85:8b:73:70:3b:90:
72:04:d9:ac:ed:27:01:c1:1f:3b:9f:80:1a:ae:2b:a8:b0:39:
93:57:e2:f6:ae:e0:85:a9:e9:4a:a9:6a:03:9a:28:0e:65:ec:
13:8f:d1:95:45:bb:2c:a2:5c:24:c6:6f:63:9e:90:df:f6:31:
0b:73:bf:42:7e:b0:32:67:b0:f5:b2:41:d1:d9:fd:6d:a5:5b:
19:a6:5e:38:80:d0:61:d6:61:14:9b:25:1b:fe:06:25:f4:f2:
82:0c:ba:b0:56:19:5d:1c:0d:81:80:85:76:7d:b0:07:d3:60:
26:35:2b:11:83:b0:12:bd:af:db:a6:04:3f:18:e0:a0:29:89:
44:16:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 21:32:36 2024 by rpki-client on console-ams.rpki-client.org